35 lines
941 B
Ruby
35 lines
941 B
Ruby
module Admin
|
|
class CrossDomainSessionsController < BaseController
|
|
|
|
layout 'admin/box'
|
|
|
|
skip_before_filter :verify_authenticity_token
|
|
|
|
skip_before_filter :validate_site_membership
|
|
|
|
skip_before_filter :set_locale, :only => :create
|
|
|
|
before_filter :authenticate_admin!, :only => :new
|
|
|
|
def new
|
|
if site = current_admin.sites.detect { |s| s._id.to_s == params[:target_id] }
|
|
@target = site.domains_without_subdomain.first || site.domains_with_subdomain.first
|
|
current_admin.reset_switch_site_token!
|
|
else
|
|
redirect_to admin_pages_path
|
|
end
|
|
end
|
|
|
|
def create
|
|
if account = Account.find_using_switch_site_token(params[:token])
|
|
account.reset_switch_site_token!
|
|
sign_in(account)
|
|
redirect_to admin_pages_path
|
|
else
|
|
redirect_to new_admin_session_path, :alert => t('flash.admin.cross_domain_sessions.create.alert')
|
|
end
|
|
end
|
|
|
|
end
|
|
end
|